[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = {{ kdc_domain | upper }}
# default_ccache_name = KEYRING:persistent:%{uid}

[realms]
{{ kdc_domain | upper }} = {
  kdc = {{ master_kdc }}
  admin_server = {{ master_kdc }}
}

[domain_realm]
.{{ kdc_domain | lower }} = {{ kdc_domain | upper }}
{{ kdc_domain |lower }} = {{ kdc_domain | upper }}
